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(54) Monitoring computer network transactions . 

(57) A network manager collects information and converts the information to reports that emphasize the 
network management and financial aspects of a computer network. The system provides a network 
monitor/data collection function 1, a network environment 4 to communicate among the activities, an end-user 
interface system 11 to support network information services, and a resource center 2 which is a repository of 
network data collected, information processing, and network coordination and monitor data collection 
personality. The network transaction data is collected by network monitors 1 and is transmitted in a processed 
form to the central resource center 2, which performs a series of data manipulation functions and stores in a 
database the information necessary to produce both standard and user-defined reports. 
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ENTERPRISE NETWORK MANAGEMENT METHOD AND APPARATUS 



1 Field of the Invention 

2 The present invention relates generally to a network monitoring facility. In 

3 particular, the present invention relates to a system for summarizing network usage to 

4 give general business decision support The system of the present invention provides 

5 reports of network transactional information from financial and operational viewpoints. 

6 Background of the Invention 

7 The growth of the networking solution to enterprise-wide computer applications 

8 has spawned a number of user problems. Many of these problems are based on the 

9 operational aspect of the computer hardware and software. The problems that occur 

1 0 have resulted a number of systems to monitor the network facilities to allow an efficient 

1 1 fault tracking capability. These monitoring systems generally encompass hardware and 

1 2 software that are located at the different client locations and that collect and report on 

13 the network operation. The method of user interface and the scope of this support 

1 4 varies by system but the general purpose is consistently the quick detection of network 

1 5 faults or problems and the efficient resolution of these faults or problems or a graphical 

1 6 representation of the network topology. This class of product is designed for use by the 

1 7 system administration professional having numerous years of network expertise. 

1 8 For example, U.S. Patent Number 5,31 5,580 to Phaal for a "Network Monitoring 

1 9 Device and System" discloses a system composed of hardware and software for 

20 monitoring and sampling network packets and for delivering this information to a central 
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1 measurement station. U.S. Patent Number 5,317,564 to Nugent for a "Merging 

2 Network for Collection of Data from Multi-Computers" discloses a system of hardware 

3 and software for measuring parameters of operation and transmitting them as packets 

4 to a collector node for processing. U.S. Patent Number 5,295,244 to Dev. et al. for a 

5 "Network Management System Using Interconnected Hierarchies to Represent 

6 Different Network Dimensions in Multiple Display Views" discloses a network manager 

7 which represents the interactions of network entities to a user. It provides a way for the 

8 user to access information about the status of the network. U.S. Patents Numbers 

9 5,226,120 to Brown, et al. , 5,101,402 to Chiu, et al. , 5,067,107 to Wade , and 

10 4,81 7,080 to Soha all disclose similar combinations of hardware and software for 

1 1 monitoring the network data by examining packets and presenting a summary of the 

12 traffic to support the network administrator. 

13 Early computer networks were simple mainframes communicating to remote job 

14 entry (RJE) stations having functions limited to the processing of transactions in 

1 5 support of enterprise applications. These computer networks have evolved into 

1 6 massive complex topologies. The operation of these networks support all phases and 

17 operations of the business enterprise. This support includes the former transaction 

1 8 processing applications as well as all phases of the management hierarchy. There are 

1 9 very few business activities that are not supported by these complex computer systems. 

20 An implication of this growth in size, complexity, and functionality is that almost all costs 

21 of the various business activities are related to the efficient and cost-effective operation 

22 of the computer network. The evolution of the purpose and sophistication of the 
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1 monitor programs has not met this increased level of operational need. 

2 The evolution of computer application has followed a steady path from the old 

3 transaction type of processing (payroll, billing, etc.) to almost all levels of the business 

4 hierarchy. Many products exist that support the executive in analyzing the information 

5 gathered from business applications in order to make well informed specific operational 

6 management decisions. The user interfaces of these products have also been 

7 enhanced to allow executives the ability to view this information and even to create new 

8 ad-hoc views to support their particular business activities. These products allow the 
.9 summarizing of transactional data and the creating of simple but effective 

1 0 representations that will allow the decision maker to make an informed decision as well 

11 as to create presentations that will persuade other interested management personnel to 

12 accept these decisions. This use of the lower level transactional data to create these 

13 up to the minute operational views has not yet been translated, into network monitoring 

14 activities. 

15 The monitoring programs that are currently available can be compared to the 

16 early programs that allowed some creation of transactional summary information from 

1 7 the early computer applications. The present day monitors require a computer 

1 8 professional to understand the implications of the network transactions and the results 

1 9 are given purely in terms of finding and the detecting any faults and operational 

20 difficulties of the network. Other products only focus on giving a graphical 

21 representation of the network. There is a strong and present need to upgrade the level 

22 of these programs to facilitate the same sort of decision support mechanisms that are 
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available to the business management executives. 

The monitor programs currently available allow the user to pick a transaction • 
type and to pull network statistics from simple databases that keep a record of all 
packets (lowest level of network transaction). These statistics can be formed into 
reports that are understood by an experienced network professional in order to 
facilitate the detection of the location and type of network fault conditions. Other types 
of systems could be used to collect and present, in a meaningful and useful way, the 
kind of information required by business management executives. 

For example, there has iong been a need to be able to control the network 
operation from an executive management perspective. The information that is being 
gathered could be combined with business information relating to costs of operation. 
The user interface should be able to be used by a non-computer professional and the 
information that is presented would pertain to the business objectives and control of the 
computer network as a critical business function. The ability to create timely ad-hoc 
reports of the information cross referenced by location, time of day, and type of 
equipment and/or other factors of interest to the user would play an important role in 
helping management determine the most efficient usage of the most costly network 
components. These reports should also identify what usage requirements are needed 
in each location including the elusive random burst usage information. A system is 
necessary to make this evolutionary leap to control these increasingly complex network 
topologies with a simple easy to understand implementation and user interface in order 
to provide meaningful information and useful network activity measurement capabilities. 



1 S ummary of the Invention 

2 It is therefore an object of the present invention to provide a computer hardware 

3 and software system to facilitate the user's financial and organizational control of the 

4 network topology. 

5 It is an additional objective of the present invention to provide an overview of the 

6 entire network with a minimum of delay. (Nominally less than 10 minutes delay for a 

7 view of the user's entire network.) 

8 It is a further objective of the present invention to provide data pertaining to 

9 network cost factors, for example, network maintenance performance such as hardware 

1 0 mean-time to failure and mean-time to repair. 

11 . . It. is also an objective of the present invention to provide comparisons of network 

12 operations in different time zones by client/server, or by user defined transaction 

13 activity and/or essentially any factor that can be user defined. 

14 It is a further objective of the present invention to provide dedicated virtual 

15 . network equipment and network facility reports. 

16 It is an additional objective of the present invention to provide users the ability to 

17 easily update network information such as client/server additions and deletions before 

18 the effective date of the change. 

19 It is another objective of the present invention to provide information on the 

20 condition of the network, LAN, or client/server availability. 

21 It is also an objective of the present invention to provide information on network 

22 operations and statistics on network activity, site location, equipment type, and 
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1 communication link type. 

2 It is yet a further objective of the present invention to provide a comparison of 

3 vendor performance such as the impact of time of day, holidays, major disasters, etc., 

4 on vendor performance. 

5 These and other objects and advantages of the present invention will be 

6 apparent to those of ordinary skill in the art upon inspection of the detailed description, 

7 drawings, and appended claims. 

8 The system of the present invention is a means for supporting a network 

9 manager by collecting data pertaining to the financial and operational characteristics of 

1 0 networks. The network manager collects information and converts the information to 

1 1 reports that emphasize the network management and financial aspects of a computer 

12 network. These reports may be selected, designed and/or formatted by the network 

13 executive in a manner that best meets the manager's unique needs. 

14 The present invention accomplishes this function through the use of four distinct 

1 5 activities performed by the system. These activities provide a network monitor/data 

16 collection function, a proprietary network environment to communicate among these 

17 activities, an end-user interface system to support network information services, and a 

1 8 resource center activity is a repository of network data collected, information 

19 processing, and network coordination and monitor data collection personality. 

20 The network transaction data is collected from each configured LAN by the 

21 attached network monitors. This data is transmitted in a processed form to a central 

22 resource center. The central resource center performs a series of data manipulation 
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1 '* -nctions and stores in a database the information necessary to produce both standard 

2 and user-defined reports. The end-user is allowed to directly input data that gives 

3 vendor specific information, and also to input a description of the network hardware, 

4 software, and interfaces. The end-user can also define sub-activities (virtual networks) 

5 to facilitate the tracking of information in relation to a specific business unit The end- 

6 user may specify a number of conditions (alarms) that will produce specific 

7 management attention if met These include critical and sensitive situations as well as 

8 specific location outages. 

9 Brief Description of the Drawings 

10 FIG. 1 shows a block diagram of the system of the present invention, 

ir 1 Detailed Description of the Present Invention 

12 Definitions 

13 Network Management Resource Services or "NMSR") is a product family that 

14 allows enterprise network users to manage, monitor, measure, and improve the 

15 cost/performance of a business activity. 

16 A Transaction is one or more functions, which, when executed, accomplish a 

17 specific enterprise purpose (business or network). 

18 NMRS Data is data generated from the NMRS Monitor for database use. 

19 NMRS Monitor is the source of NMRS data. This is normally a device that is 

20 connected to each LAN in a network. 

21 User Console is an input/output device that permits the user to communicate 

22 with the NMRS User Service Management Resource Desk. 

7 



1 NMRS User Resource Desk is an interface that responds to a user request and 

2 accepts user-provided instructions and data from the user console. 

3 Sub-Activity (Business) is a network activity that is an integral subset of a 

4 Business Activity. For example, inventory ,f look up" might be a sub-activity of a Sales 

5 Activity. 

6 Disclosure 

7 . The present invention, known as Network Management Resource Services 

8 (NMRS), is able to collect and monitor network traffic information and allow high level 

9 financial and operational management information. This information is used to support 

10 strategic network management decisions in such areas as asset management and 

11 control, vendor hardware repair/maintenance cost comparisons, and other user 

12 configurable reporting areas* The different system functions are integrated to allow an 

1 3 enterprise-wide collection of network data and to transform this data into information 

14 that is available to a management professional. 

15 The user (typically a network executive or staff) can retrieve figures on the 

16 MTBF for vendor specific, site specific, usage rate, activity type, etc. The system focus 

17 is on the reporting of network performance and availability, and on numerous cost 

1 8 factors as opposed to fault diagnosis. Referring to FIG. 1, the NMRS system is 

19 described. The NMRS system includes four major functional modules. These are the 

20 NMRS Resource Center 2, the User Resource Management Center 11, the NMRS 

21 Network Facility 4, and the NMRS Monitor 1. 

22 The NMRS Resource Center 2 serves as a database depository to support user 
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1 network data collection and user report generation. This service is supported by and is 

2 physically located on a supplier's premises. The system is supported by the use of a 

3 database manager, the NMRS Network Facility 4, computer system hardware base, 

4 NMRS application programs, and the transmitted data summaries collected by the 

5 NMRS Monitor 1. 

6 The User Resource Management Center 1 1 has a functional capability similar to 

7 that of the NMRS Resource Center 2. It will be physically located on the user's 

8 premises whereas the NMRS Resource Center 2 is located on the suppliers premises. 

9 The system is set up and supported by components similar to those of the NMRS 

10 Resource Center 2. One exception is that the data collection function is only performed 

1 1 : by the NMRS Resource Center 2. An NMRS User Console 3 is attached to this system 

12 in order to provide the user with an application interface to the created information. 

1 3 This information is downloaded from the NMRS Resource Center 2 via the NMRS 

14 Network Facility 4. 

15 The NMRS Network Facility 4 transports data collected from the user network by 

16 the NMRS Monitor 1 to the NMRS Resource Center 2. This data can be summarized by 

17 the NMRS Monitor 1 to limit the amount of data that is sent The NMRS Network Facility 

18 4 is also used to transport the data required to provide NMRS services to its users. 

19 The NMRS Monitor 1 is connected to each LAN in the user's network. The 

20 NMRS Monitor 1 collects data for each user-defined transaction. The summarized 

21 results are passed to the NMRS Resource Center 2 via the provided NMRS Network 
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Facility 4. 

The NMRS Resource Center 2 defines the logical user network by the use of 
three directories. These directories support the storage and retrieval of user 
information to identify the hardware, links, and customer-specific information that 
details the type of transactions to be managed as well as data on vendors and 
business activities. These directories are called the Equipment Directory 6, the 
Communications Directory 7, and the Transaction (sub-activity) Directory 8. 

The Equipment Directory 6 is a group of tables that define the network and 
record data for use in customer reports. The following is an outline of some key items 
that are included in the equipment directory: 

LAN tabl e - a record for each user LAN; ' ■ 

LAN type table - a record for each type of user LAN;. 
- - Site table - a record for each user site where one or more LAN's are located;. 

Status table - a record for each customer-assigned state condition;. 

Device table - a record for each device (or node) on any LAN; 

Kind tabl e - a record for each kind (file server, etc.) of device on any LAN; 

Device type table - a record for each type of device (or node) on any LAN 
(example: Compaq 486-16, 16M, 500MB); 

OS table - a record for each type of operating system used in a device on any 
LAN (example: DOS 6.2). 

The Communication Directory 7 defines which interconnect network LANs. There 
may be as few as one communications link in this directory. 

10 



1 - Vendor table - a record for each vendor(or supplier) of communications channels 

2 connected to devices on any LAN. Typically the communication channel is connect to 

3 a LAN by a router device. 

4 The Transaction Directory 8 contains a group of tables that define the virtual 

5 networks constituting the total enterprise network. This organization will always contain 

6 at least the following two tables: 

7 - Sub-activitv table .- a record for each customer-defined sub-activity defined for 

8 any business activity; and 

9 - Business activity table - a record for each customer-defined business activity. 

1 0 The NMRS Resource Center 2 supports two other basic functions. These are a 

1 1 Performance Database 10 and an Alarm Directory 12. The Performance Database 10 

12 contains a record for each combination of origination unit, termination unit, and 

1 3 business activity which provides the number of frames and average sizes of frames for 

14 each period of time (nominally six minutes). The Alarm Directory 12 is a group of tables 

1 5 that specify customer-assigned names for alarm conditions, customer selections for 

1 6 conditions to be alarmed and customer selection of alarm display and alerting 

17 treatment. 

1 8 The User Resource Management Center 1 1 contains a similar technical 

1 9 organization. The information is received from the NMRS Resource Center 2 based on 

20 a user request that is entered via the User Console 3 and downloaded by the NMRS 

21 Network Facility 4; There is no network monitor data collection function within this 

22 system. This keeps the process of collecting and packaging of network transactions 

11 



1 from affecting other non-NMRS applications. 

2 The NMRS Network Facility 4 provides the coordination between the various 

3 NMRS activities. This mechanism will provide the means by which the collected data 

4 from the NMRS Monitor 1 is transported to the NMRS Resource Center 2. The NMRS 

5 Network Facility 4 also delivers the information to the User Resource Management 

6 Center 11 that is necessary to support the various end-user information analysis and 

7 maintenance applications. 

8 The NMRS Monitor 1 is connected to each LAN in the user's network. The 

9 NMRS Monitor application collects data for each user transaction. Each data record 

10 has at least five pieces of information. These are the origination unit, the destination 

11 unit, the transaction type, the frame count, and the frame size. At a programmable 

1 2 interval, the user activity records are bundled by the monitor together with a header 

13 ; including the monitor number, the time interval, and the record count. The processed 

14 activity records with a header record are transmitted to the NMRS Resource Center 2 

1 5 via the NMRS Network Facility 4. 

16 Once the NMRS is installed, the user-specific data about the configuration of the 

1 7 network is entered. This will include all of the information used to support the end-user 

1 8 applications as well as customer selected information to support specific personalized 

19 application interfaces. This information includes data about the type of hardware, the 

20 location of hardware, LANs, virtual (logical) networks, operating systems, vendors, and 

21 definitions for business activities and sub-activities. Also, the user describes the names 

22 and conditions and user-interface options of the alarms (management alert) database. 

12 



1 Once the NMRS is operational the NMRS Monitor 1 will begin to transmit 

2 transaction data to the NMRS Resource Center 2. First, the information is grouped and 

3 packaged with information identifying the particular monitor. The information is sent to 

4 the NMRS Resource Center 2 via the NMRS Network Facility 4. The information is then 

5 analyzed and records are created that store transaction averages by activity and sub* 

6 activity. 

7 . The User Resource Management System 1 1 is now able to provide management 

8 information to the end-user via the NMRS User Console 3, The user will select to 

9 begin. The NMRS Resource Center 2 will receive the request via the NMRS Network 
10 Facility 4. The NMRS application programs will begin to format the information that 

.11 . support the end-user interface as well as collect the most up to date information. After a 

12 period of less than 10 minutes, the end-user session is ready to begin. 
.13 The end-user can select from a wide variety of reports that use the existing 

14 database. A partial list includes : 

15 - hardware repair /maintenance by vendor report; 

16 - MTBF rates by vendor; 

17 - MTBF rates by site location; 

18 - MTBF by usage rate; 

19 - MTBF by activity or sub-activity type; 

20 . - vendor response time by location; 

21 - vendor response time by time of day; 

22 - vendor mean time to repair; 

13 



1 - asset control and location reports; 

2 - comparisons for the same operational hour by hardware type; 

3 - comparisons for the same operational hour by transaction type; 

4 - equipment reports! 

5 These reports show the orientation of the information with respect to network 

6 availability, relative cost factors, and network performance versus fault diagnosis. Many 

7 other types of reporting can be selected by using the data that has been collected in 

8 creative user selectable ways. 

9 Preferred and alternate embodiments of the present invention have now been 

10 described in detail. It is to be rioted, however, that this description of these specific 

1 1 embodiments is merely illustrative of the principles underlying the inventive concept. It 

12 is therefore contemplated that various modifications of the disclosed embodiments will, 

13 without departing from the spirit and scope of the invention, be apparent to persons of 

14 ordinary skill in the art. _ 
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CLAIMS: 




2 


1. 


A method for providing reports on characteristics of a. computer network. 


3 


comprising: 


4 


a) 


monitoring all network transactions; 


5 


b). 


collecting data for the network transactions; 


.6 


c) 


providing the data to a centralized database; 


7 


d) 


manipulating the data to produce a standard report describing management 


8 




and financial characteristics of the network; 


9 


e > 


receiving a user request for a standard report; 


10. 


*) 


transmitting the standard report to an end-user location; and 


11 .. 


...... g) 


presenting the standard report to. the user. 


12 . 


2. 


The method of claim. 1 , further comprising: 


13 


a) 


receiving user inputs defining particular network transaction data of interest; 


14 


b) 


receiving user data defining particular report format parameters; 


15 


c > 


receiving user-data defining a network topology of interest; 


16 


d) 


manipulating the data defining particular report format data, the data 


17 




defining particular report format parameters, and the data defining a network 


18 




topology of interest to produce a custom report describing the network 


19 




management and financial characteristics of the network of interest to the 


20 




user; 


21 


e) 


receiving a user request for a custom report; 


22 


f) 


transmitting the custom report to an end-user location; and 
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1 g) presenting the custom report to the user. 

2 3. The method of claim 2, further comprising: 

3 a) storing the user inputs defining particular network transaction data of 

4 interest of a first user, the user data defining particular report format 

5 parameters of the first user, and the user data defining a network topology of 

6 interest of the first user; and 

7 b) automatically applying the user inputs defining particular network 

8 transaction data of interest of the first user, the user data defining particular 

9 report format parameters of the first user, and the user data defining a 

1 0 network topology of interest of the first user to the network data in response 

1 1 to a request for a network report by the first user. 

12 4: The method of claim 1 , further comprising summarizing the data for the 

13 network transactions prior to transmitting the data to the centralized database. 

14 5. The method of claim 1 , wherein the standard report further describes 

1 5 operational characteristics of the network. 

16 6. The method of claim 1 , wherein providing the data to a centralized database 

1 7 includes sending the data via a dedicated communications facility to the centralized 

18 database. 

19 7. The method of claim 6, wherein the dedicated communications facility is a 

20 virtual network. 

21 8. The method of claim 6, wherein the dedicated communications facility is a 

22 physical communications network. 

16 



1 9. The method of claim 1, wherein the monitoring of network transactions and 

2 the collection of data takes place continuously. 

3 .10. The method of claim 1, wherein monitoring all network transactions 

4 comprises capturing and measuring user local area network activity, and wherein 

5 collecting data for the network transactions comprises classifying the local area 

6 network activity according to defined categories. 

7 11. The method of claim 6, wherein monitoring all network transactions 

8 comprises capturing and measuring user local area network activity, and wherein 

9 collecting data for the network transactions comprises classifying the local area 

1 0 network activity according to defined catgories. 

11 12. The method of claim 1 0, wherein the defined catgories are user-defined. 

12 13. The method of claim 1 0, wherein the defined catgories are defined by at 

13 least one directory, said at least one directory being selected from the group of 

14 directories consisting of equipment directories, transaction directories, and 

15 communications directories. 

16 14. The method of claim 1 , further comprising manipulating the data to produce 

17 a custom report describing management and financial characteristics of the network 

1 8 according to any format defined by a user. 

19 15. The method of claim 1 , further comprising storing the report for future 

20 presentation to a user. 

21 , 16. The method of claim 1 5, further comprising presenting a plurality of stored 

22 reports to the user in a comparison format. 
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1 


17. 


A system for providing reports on the characteristics of a computer network, 


2 


comprising: 


3 


a) 


a monitor disposed to monitor all network transactions; 


4 


b) 


a network manager disposed to collect data for the network transactions; 


5 


c) 


a central resource center; 


6 


d) 


a network facility disposed to provide the data to a centralized database and 


7 




to provide a standard report to an end-user location, the standard report 


8 




describing the network management and financial characteristics of the 


9 




network; 


10 


e) 


a processor disposed to manipulate the data to produce the standard report 


11 




and to receive a user request for a standard report; and 


12 


f) 


a presentation device disposed to present the standard report to the user. 


13 


18. 


The system of claim 17, wherein: 


14 


a) 


the processor is further disposed to receive user inputs defining particular 


15 




network transaction data of interest; 


16 


b ) 


the processor is further disposed to receive user data defining particular 


17 




report format parameters; 


18 


c) 


the processor is further disposed to receive user data defining a network 


19 




topology of interest; 




d) 


the processor is further disposed to manipulate the data defining particular 


21 




report format data, the data defining particular report format parameters, and 


22 




the data defining a network topology of interest to produce a custom report 
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1 describing the network management and financial characteristics of the 

2 network of interest to the user; 

3 e) the processor is further disposed to. receive a user request for a custom 

4 report; 

5 f) the network is further disposed to transmit the custom report to an end-user 

6 location; and 

7 g) the presentation device is further disposed to present the custom report to 

8 the user. 

9 19. The system of claim 1 8, further comprising: 

10 a) memory in the centralized database adapted to store the user inputs 

1 1 defining particular network transaction data of interest of a first user, the 

. 12 user data defining particular report format parameters of the first user, and 

13 the user data defining a network topology of interest of the first user; and 

14 b) wherein the processor is adapted to automatically apply the user inputs 

1 5 defining particular network transaction data of interest of the first user, the 

1 6 user data defining particular report format parameters of the first user, and 

17 the user data defining a network topology of interest of the first user to the 

1 8 network data in response to a request for a network report by the first user. 

1 9 20. The system of claim 17, wherein the central resource center is further 

20 adapted to summarize the data for the network transactions prior to transmitting the 

21 data to the centralized database. 

22 21 . The system of claim 1 7, wherein the standard report further describes 
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1 operational characteristics of the network. 

2 22. The system of claim 1 7, wherein the network facility comprises a dedicated 

3 communications facility. 

4 23. The system of claim 22, wherein the dedicated communications facility is 

5 further connected to the processor. 

6 24. The system of claim 1 7, wherein the dedicated communications facility 

7 comprises a virtual network. 

8 25. The system of claim 17, wherein the dedicated communications facility 

9 comprises a physical communications network. 

10 26. The system of claim 1 7, wherein the monitors are further disposed to 

1 1 continuously monitor all network transactions and the network manager is further 

1 2 disposed to continuously collect data for" the network transactions. 

13 27. The system of claim 17, wherein all network transactions comprise user 

1 4 local area network activity and wherein the network manager is further disposed to 

1 5 classify the local area network activity according to defined categories. 

1 6 28. The system of claim 22, wherein all network transactions comprise user 

1 7 local area network activity and wherein the network manager is further disposed to 

1 8 classify the local area network activity according to defined categories. 

1 9 29. The system of claim 27, further comprising a directory input device disposed 

20 to accept an equipment directory, a communication directory, and a transaction 

21 directory and further to define the network in terms of the equipment directory, the 

22 communication directory, and the transaction directory. 
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1 30. The system of daim 17, wherein the processor is further disposed to 

2 manipulate the data to produce a custom report according to any format defined by a 

3 user and to receive a user request for the standard report. 

4 31 . The system of claim 1 9. wherein the memory is further adapted to store the 

5 standard report. 

6 32. The system of claim 30, wherein the memory is further adapted to store the 

7 custom report. 

8 33. The system of claim 31 , wherein the processor is further disposed to 

9 manipulate a plurality of stored reports to. produce a comparison report in a format 

1 0 comparing data presented in the plurality of stored reports and to receive a user 

1 1 .. . .request for a comparison report. . 

12 34. The system of claim 32, wherein the processor is further disposed to 

1 3 manipulate a plurality of stored reports to produce a comparison report in a format 

1 4 comparing data prsented in the plurality of stord reports and to receive a user request 

15 for a comparison, report 

35. A method for providing reports on characteristics of 
a computer network, the method being substantially as herein- 
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